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The MAILING DATE of this communication appears on the cover shebt with the correspondence address- 
All claims being allowable, PROSECUTION ON THfe MERITS IS (6k REMAINS) CLOSED in this application. If not included 
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The allowed claim(s) is/are 1,4-6.8-24.2^-29 and 31-47 . 



Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a) El All b)DSome* cj □ None of the: 

1 . M Certified copies of the priority documents have been received! 

y documents have been received in Application No. 



2. □ Certified copies of the priori 



3. □ Copies of the certified copiejs of the priority documents have been received in this national stage application from the 
International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . j 

Applicant has THREE MONTHS FROM THE^MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

— \ i 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PyO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Isjotice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . : i ' , 

Identifying indicia such as the application number (see 37 CFR 1 .84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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i DETAILED ACTION , 

i ' ! 

I EXAMINER'S AMENDMENT 

! ' 

i j 

1 . An examiner's amendment to the record appears below. Should the changes 

i 

and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1.312. To ensiire consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with David E. Moore on 6 September 2007. 

The application has! been amended as follows: Claim 31 should depend on claim 

i 

24, not claim 30, as claim 30 is canceled. 

Allowable Subject Matter 

2. Claims 1 , 4-6, 8-24, 27-29, and 31-47 are allowed. 

i 

3. The following is an examiner's statement of reasons for allowance: 

With regard to claims 1, 24, and 47, Huff (International Publication Number WO 
99/57625) discloses a medium which performs the steps of monitoring communication 
requests (page 4 lines 17-22), outputting a notification in case of an abnormality (page 5 

i 
i 

lines 2-5), selecting a countermeasure from a database (page 12 lines 15-21) which 
manages content of notification and corresponding countermeasure (page 12 lines 26- 
29), and taking a countermeasure against the abnormality (page 5 lines 13-16) based 
on the selected countermeasure (page 5 lines 13-14), an information collection unit 

i 

i 

collecting kind (page 20 lines 8-26) content (page 21 lines 14-15) order (page 20 lines 
23-26) and time information (page 17 lines 25-28) of multiple proceeding 

! 
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communications, such that the information is collected through an attack caused by 
induction (3 failed login attempts), so that the collected information is analyzed to be 
recognized as an attack pattern to be used to predict a future attack which may occur 
(chase mission, pages 21-22), and a reflecting unit which reflects the information to a 
database (page 21 lines 6-13) which selects a countermeasure based on mounting 
information and security information (page 5 lines 9-16). Huff does not disclose using a 
decoy server, as defined by the specification as a server inducing an attack while 
pretending to have vulnerability and pretending to have vulnerability ([0078). I would not 
have been obvious for one of ordinary skill in the art to use a decoy server in Huff, since 
there is no motivation to do so. 

i 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

4. Any inquiry concerriing this communication or earlier communications from the 
examiner should be directed to Jacob Lipman whose telephone number is 571-272- 

i 

3837. The examiner can rjormally be reached on M-Fr. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on 571-272-381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at;866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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